Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39322e302f32332d3234203d3e2031393136.roa
File:                     3230302e3134342e39322e302f32332d3234203d3e2031393136.roa (raw, json)
Hash identifier:          fuGzxdpVO//O8UUr2BmiomjOHjzcppI5H/h3O3vXQfM=
Subject key identifier:   33:6E:29:CA:CC:6D:3E:9E:4F:56:B1:36:7D:DD:EB:76:7C:58:4F:30
Certificate issuer:       /CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
Certificate serial:       3FA298307C0C6D77FE3EEEF8F23602C8C2377626
Authority key identifier: 2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39322e302f32332d3234203d3e2031393136.roa
Signing time:             Mon 13 Oct 2025 13:46:32 +0000
ROA not before:           Mon 13 Oct 2025 13:41:32 +0000
ROA not after:            Mon 12 Oct 2026 13:46:32 +0000
asID:                     1916
IP address blocks:        200.144.92.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl
                          rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 21 Oct 2025 12:08:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a2:98:30:7c:0c:6d:77:fe:3e:ee:f8:f2:36:02:c8:c2:37:76:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A617987C2BF83B643E45B35FB810319E8B26AA5
        Validity
            Not Before: Oct 13 13:41:32 2025 GMT
            Not After : Oct 12 13:46:32 2026 GMT
        Subject: CN=336E29CACC6D3E9E4F56B1367DDDEB767C584F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:bd:54:56:92:53:bb:25:fa:8c:26:f2:0d:6a:
                    7e:0f:b1:be:ab:5e:c5:dd:53:ca:40:6d:39:65:8e:
                    36:99:36:28:b0:28:fd:72:98:fd:09:47:13:4d:94:
                    a6:a7:cf:3b:fa:75:28:29:96:a2:cf:da:db:0a:26:
                    35:99:26:bc:96:7c:12:3b:1e:9b:07:66:34:12:ce:
                    1b:65:6e:fb:3b:21:46:26:34:06:eb:42:6e:a6:bd:
                    ac:c9:35:38:c2:61:46:ce:bf:74:23:59:2b:db:d7:
                    94:0c:9e:5e:a7:33:5d:df:3d:8d:1a:a7:3a:bd:26:
                    97:f1:89:ca:8e:82:41:7b:df:f9:13:13:34:7c:72:
                    8a:cb:ef:29:57:1e:7c:92:ce:68:53:c2:8e:0a:c5:
                    2e:84:6e:87:b7:ef:3b:d4:f5:69:d9:4d:c6:63:b3:
                    4d:a8:d5:b9:e4:5d:de:1e:06:60:49:27:33:00:70:
                    2f:3e:10:c4:fb:d3:99:f8:95:c2:31:cd:41:47:27:
                    a7:2a:7f:46:91:e7:46:1a:30:ab:a3:60:cd:85:19:
                    8c:6a:a9:90:a3:e4:96:08:fc:82:09:39:5c:b0:74:
                    35:d0:4e:93:ac:61:80:d4:6d:24:96:c7:5e:94:25:
                    69:cf:7d:ac:2a:f7:ed:75:61:6d:95:46:8a:f2:0c:
                    c2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6E:29:CA:CC:6D:3E:9E:4F:56:B1:36:7D:DD:EB:76:7C:58:4F:30
            X509v3 Authority Key Identifier:
                keyid:2A:61:79:87:C2:BF:83:B6:43:E4:5B:35:FB:81:03:19:E8:B2:6A:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/2A617987C2BF83B643E45B35FB810319E8B26AA5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2A617987C2BF83B643E45B35FB810319E8B26AA5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xpyJNVZSf4NatVBAsox9RYepbiDWxtcUU9XXde7ULJj/0/3230302e3134342e39322e302f32332d3234203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.144.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:fa:3e:a0:90:9d:a6:45:d4:1f:c6:74:e1:86:a3:6c:d7:d9:
         ec:b7:8a:9b:6b:fc:b0:29:d7:4f:fa:61:7a:8f:4f:3d:19:d5:
         86:3e:76:aa:31:f3:ea:bf:af:46:61:ce:b7:2a:2c:58:6d:3f:
         90:6d:2d:ec:c2:c4:ad:5d:b6:1e:23:a0:d5:2e:59:e3:41:35:
         61:04:79:7e:e9:ce:3b:9e:5b:2a:35:0f:96:5e:4d:d0:e5:b7:
         b6:38:a5:3a:c6:bf:21:3e:5f:8f:cd:a7:0e:b1:f6:e1:1c:59:
         cd:8c:b3:64:dd:96:af:ae:27:99:c6:cc:f2:09:60:37:63:c3:
         83:de:b3:66:72:42:ac:23:80:5a:d0:af:81:98:72:db:81:d6:
         10:5c:1a:89:01:e3:2a:c3:69:67:81:9b:00:21:a4:e2:5c:3d:
         f4:be:e8:3c:b8:84:c6:ec:a7:a7:be:60:55:36:fb:d6:3c:0f:
         40:66:85:d5:38:c9:6b:2f:88:2f:5c:18:84:63:65:1f:25:96:
         69:09:0b:22:9e:7e:aa:32:a4:ff:a8:d1:7c:93:06:a3:23:a0:
         7e:b7:6b:63:fe:1d:c6:e0:78:ab:46:2d:8a:ab:ee:79:ce:56:
         96:59:99:d9:97:5e:c3:f5:72:a9:39:ee:1b:44:ea:06:42:7d:
         d7:62:4c:0f
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUP6KYMHwMbXf+Pu748jYCyMI3diYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkE2MTc5ODdDMkJGODNCNjQzRTQ1QjM1RkI4MTAzMTlF
OEIyNkFBNTAeFw0yNTEwMTMxMzQxMzJaFw0yNjEwMTIxMzQ2MzJaMDMxMTAvBgNV
BAMTKDMzNkUyOUNBQ0M2RDNFOUU0RjU2QjEzNjdERERFQjc2N0M1ODRGMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKvVRWklO7JfqMJvINan4Psb6r
XsXdU8pAbTlljjaZNiiwKP1ymP0JRxNNlKanzzv6dSgplqLP2tsKJjWZJryWfBI7
HpsHZjQSzhtlbvs7IUYmNAbrQm6mvazJNTjCYUbOv3QjWSvb15QMnl6nM13fPY0a
pzq9JpfxicqOgkF73/kTEzR8corL7ylXHnySzmhTwo4KxS6Eboe37zvU9WnZTcZj
s02o1bnkXd4eBmBJJzMAcC8+EMT705n4lcIxzUFHJ6cqf0aR50YaMKujYM2FGYxq
qZCj5JYI/IIJOVywdDXQTpOsYYDUbSSWx16UJWnPfawq9+11YW2VRoryDMJxAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUM24pysxtPp5PVrE2fd3rdnxYTzAwHwYDVR0j
BBgwFoAUKmF5h8K/g7ZD5Fs1+4EDGeiyaqUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHhweUpOVlpTZjROYXRWQkFzb3g5UlllcGJpRFd4dGNVVTlYWGRlN1VM
SmovMC8yQTYxNzk4N0MyQkY4M0I2NDNFNDVCMzVGQjgxMDMxOUU4QjI2QUE1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzJBNjE3OTg3QzJCRjgzQjY0
M0U0NUIzNUZCODEwMzE5RThCMjZBQTUuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR4cHlKTlZaU2Y0TmF0VkJBc294OVJZZXBiaURXeHRjVVU5WFhkZTdVTEpqLzAv
MzIzMDMwMmUzMTM0MzQyZTM5MzIyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAciQXDANBgkqhkiG9w0BAQsFAAOCAQEAI/o+oJCdpkXU
H8Z04YajbNfZ7LeKm2v8sCnXT/pheo9PPRnVhj52qjHz6r+vRmHOtyosWG0/kG0t
7MLErV22HiOg1S5Z40E1YQR5funOO55bKjUPll5N0OW3tjilOsa/IT5fj82nDrH2
4RxZzYyzZN2Wr64nmcbM8glgN2PDg96zZnJCrCOAWtCvgZhy24HWEFwaiQHjKsNp
Z4GbACGk4lw99L7oPLiExuynp75gVTb71jwPQGaF1TjJay+IL1wYhGNlHyWWaQkL
Ip5+qjKk/6jRfJMGoyOgfrdrY/4dxuB4q0Ytiqvuec5WllmZ2Zdew/VyqTnuG0Tq
BkJ912JMDw==
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:11:11 2025 by rpki-client